> Is the 'vfs objects' line in the [global] section ? if so, try moving > it to the shares, there have been reports that adding 'vfs objects' to > [global] causes problems.> RowlandDear Rowland This host is a Samba 4.6.2 domain member server. In the Global session of smb.conf, I have this line: Vfs objects = acl_xattr On Sharing: Vfs objects = recycle, shadow_copy2, full_audit I disabled vfs objects in the global session, but the error still persists.
On Fri, 28 Apr 2017 12:31:43 +0000 (UTC) Ricardo Pardim Claus via samba <samba at lists.samba.org> wrote:> > > Is the 'vfs objects' line in the [global] section ? if so, try > > moving it to the shares, there have been reports that adding 'vfs > > objects' to [global] causes problems. > > > Rowland > > > Dear Rowland > > This host is a Samba 4.6.2 domain member server. > In the Global session of smb.conf, I have this line: > > Vfs objects = acl_xattr > > On Sharing: > > Vfs objects = recycle, shadow_copy2, full_audit > > I disabled vfs objects in the global session, but the error still > persists. >It was just a guess that it was a DC, but it was based on this: I was experiencing problems when I simultaneously enabled shadow_copy2 and full_audit modules. When enabled, problems occurred in the sysvol folder. So how can you be having problems in 'sysvol' if this is a domain member ? I think you should post your smb.conf. Rowland
> It was just a guess that it was a DC, but it was based on this:> I was experiencing problems when I simultaneously enabled shadow_copy2 and full_audit modules. > When enabled, problems occurred in the sysvol folder.> So how can you be having problems in 'sysvol' if this is a domain > member ?> I think you should post your smb.conf.> RowlandAs for the sysvol problem, it was in an earlier attempt, where I tried to set up full audit in a DC. But at the moment I'm trying to enable auditing on a file server. Follows my smb.conf: # Global parameters [global] workgroup = DOMAIN security = ADS realm = domain.local netbios name = SRV16 server string = Samba4 Server winbind enum users = yes winbind enum groups = yes winbind use default domain = Yes winbind nss info = RFC2307 idmap config * : backend = tdb idmap config * : range = 2000-9999 idmap config DOMAIN: backend = rid idmap config DOMAIN: range = 10000-99999 log file = /var/log/samba/samba.log log level = 3 syslog = 10 #vfs objects = acl_xattr map acl inherit = yes store dos attributes = Yes guest account = guest username map = /etc/samba/user.map server services = s3fs dcerpc endpoint servers = -winreg -srvsvc [data] comment = Folder data path = /mnt/data read only = no vfs objects = recycle, shadow_copy2, full_audit # Recycle recycle:repository = .lixeira recycle:facility = LOCAL1 recycle:priority = NOTICE recycle:maxsize = 0 recycle:directory_mode = 0774 recycle:subdir_mode = 0774 recycle:keeptree = true recycle:touch = true recycle:versions = true recycle:exclude = *.tmp, *.log, *.obj, ~*.*, *.bak, *.exe, *.bin recycle:exclude_dir = tmp, temp, cache ################################################################################# # SHADOW COPY / SNAPSHOT shadow:mountpoint = /mnt/data/ shadow:snapdir = .snapshot shadow:basedir = /mnt/ shadow:sort = desc shadow:localtime = yes shadow:format = @GMT-%Y.%m.%d-%H.%M.%S # AUDIT FILESERVER full_audit:prefix = %u|%I|%S|%g full_audit:success = all full_audit:failure = all !open full_audit:facility = local1 full_audit:priority = ALERT
On Fri, 28 Apr 2017 14:55:10 +0000 (UTC) Ricardo Pardim Claus via samba <samba at lists.samba.org> wrote:> [global] > > #vfs objects = acl_xattrTurn the above line back on, you need it.> server services = s3fs > dcerpc endpoint servers = -winreg -srvsvcRemove the above lines, they are meant for a DC smb.conf> > > [data] > comment = Folder data > path = /mnt/data > read only = no > vfs objects = recycle, shadow_copy2, full_audit >It should work, have you tried changing the order, or just using full_audit ? Rowland
> It should work, have you tried changing the order, or just using full_audit ?I have enabled the line below: Vfs objects = acl_xattr I disabled all other modules, I just left full_audit. The problem is even when I leave only the full_audit enabled.
On Fri, Apr 28, 2017 at 5:31 AM, Ricardo Pardim Claus via samba < samba at lists.samba.org> wrote: In the Global session of smb.conf, I have this line:> > Vfs objects = acl_xattr > > On Sharing: > > Vfs objects = recycle, shadow_copy2, full_audit >This isn't related to your issue but just so you know, the line is the share will override the line in the global, it will not add to it. So if you want all those vfs objects on the share you should put this in the share: [share] vfs objects = acl_xattr recycle shadow_copy2 full_audit Also, the example in "man smb.conf" does not use commas between the objects, so I don't either. I don't know if they are permitted or not.
Hi mark, In my case, even when I leave only the full audit module, the problem occurs.> This isn't related to your issue but just so you know, the line is the share will override the line in the global, it will not add to it. So if you want all those vfs objects on the share > you should put this in the share:>[share] >vfs objects = acl_xattr recycle shadow_copy2 full_audit>Also, the example in "man smb.conf" does not use commas between the objects, so I don't either. I don't know if they are permitted or not.